AutoHotkey Community

[GuJer]

i want the ahk of my Application but i Forgot my password
can i get my ahk without my password
please help me.

[PhiLho]

Bad idea to remove the source of a script... (supposing it is really your script).
The encryption is designed to be strong, so unless Chris has some solution (AutoIt creator has a back door to crack such files, I think), you have to rewrite your script...
_________________
vPhiLho := RegExReplace("Philippe Lhoste", "^(\w{3})\w*\s+\b(\w{3})\w*$", "$1$2")

[Obi-Wahn]

I had the same problem with one of my scripts, and so on, I wrote a BF-Tool to Crack the Password (AHK with exe2ahk). The sucess was, that I recognized that it will take apx. 3-5 months to rewrite a script (as bigger a script as more time u will need).
Sorry.

[BoBo]

Haven't seen any download link. OTOH I'm not feeling cosy to execute a hacker tool to hack my own executable while that executable is terminating my box

[Veovis]

Does this mean all of our AHK scripts password encrypted into EXEs are not safe????
_________________

"Power can be given overnight, but responsibility must be taught. Long years go into its making."

[Veovis]

Hmmmm, this is a pretty severe problem. Any ahk code we compile can easily be uncompiled.

Is there any way to fix this? UPXing an exe would add another step to uncompiling but doesn't really add to difficulty...

Edit:
sigh.... i just spent a half hour finding some pretty good EXE compressors/encryptors then just for fun searched for so uncompressors and found several that could defeat everyone that i found, even the lesser known ones.

Sounds like we would be best off re-writing the ahk2exe program... (like not to store the password in it...)
_________________

"Power can be given overnight, but responsibility must be taught. Long years go into its making."

[google]

In the german ahk-board you can find some kind of "anti-decompiler" project/patch: http://de.autohotkey.com/forum/topic1177.html

[SKAN]

[Veovis]

he translated it for us, just go to the link, everything (in the first post) is there twice, the second being in english
_________________

"Power can be given overnight, but responsibility must be taught. Long years go into its making."

[SKAN]

[Thalon-not logged on]

I did really miss this topic.

IsNull and I were looking for a solution against this hack.
The password is not saved plain-text, but it is compared plain text when looking at the assembler-code.

With the great help of CDW we were able to create a ahk2exe-patch that stores the data in an unexpected format and therefore prevent decompiling.
Our solution was partially ready as I told chris from this hack and he did send me the solution in 1.46.0.10 after a few days...

I'm not shure if our solution will be provided in addition to the now existing one. It depends on the safety-level of the /nodecompile-switch.
I'll investigate this in next 2-4 weeks.

I'm happy that scripts are a bit more secure now! (The hack doesn't work for new scripts, even with "normal" password).

Thanks CDW, Thanks Chris!

Thalon